CWE-696
Incorrect Behavior Order
The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.
Impactr finds and proves whether CWE-696 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.